Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa
File:                     3139302e3131312e32342e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          3ZSg+23P3RfDn6CAY7P0EDqTt7CXWBltQZKFbtoSHyM=
Subject key identifier:   0A:35:F1:B0:4E:6F:18:1F:DE:62:85:BD:90:FC:78:55:23:CC:D7:23
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3F7A21A6721922ED5974D328A15C9AB2A692E0CF
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:40:55 +0000
ROA not before:           Tue 05 Mar 2024 17:35:55 +0000
ROA not after:            Tue 04 Mar 2025 17:40:55 +0000
asID:                     23243
IP address blocks:        190.111.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:21:a6:72:19:22:ed:59:74:d3:28:a1:5c:9a:b2:a6:92:e0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:35:55 2024 GMT
            Not After : Mar  4 17:40:55 2025 GMT
        Subject: CN=0A35F1B04E6F181FDE6285BD90FC785523CCD723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:86:93:51:66:d4:71:84:34:cd:64:4e:01:
                    ca:c0:98:41:14:a2:85:1a:d8:b6:07:f2:45:14:80:
                    5f:b0:23:43:5d:33:f6:62:99:01:86:b9:6e:cc:14:
                    48:4b:72:6d:04:b1:d6:43:d8:87:4b:31:20:94:32:
                    72:76:0e:e8:7f:6f:89:73:21:83:7b:ca:80:cc:d3:
                    24:e3:f5:95:4b:b7:19:8c:ae:31:19:eb:c5:c6:c1:
                    88:73:51:46:83:3b:9e:fb:cc:94:e9:46:b3:69:c3:
                    78:b2:0f:49:d3:ed:64:e4:60:dc:ff:4d:20:d5:b8:
                    c6:c0:4c:7f:0c:b4:7e:23:87:73:3d:9d:5e:c6:f7:
                    35:95:41:a2:89:81:aa:8a:c4:dd:f5:18:d2:99:1b:
                    c6:0e:46:1d:a3:f4:26:47:97:6d:48:3a:ed:66:2e:
                    ec:fa:5e:36:b0:e4:7c:be:02:8a:0c:91:71:7d:58:
                    72:8a:8c:bf:c6:a4:06:d9:8e:87:ff:59:67:ea:fd:
                    27:33:1e:54:b9:03:c2:5c:61:25:b0:60:4a:2a:49:
                    66:9b:b9:d6:76:85:7f:e2:d4:b3:10:fd:a0:c0:65:
                    cf:b7:36:f5:2b:75:d0:cb:6c:4c:11:90:1a:68:38:
                    1d:bb:aa:31:af:39:4f:9a:cc:1e:84:6a:84:60:da:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:35:F1:B0:4E:6F:18:1F:DE:62:85:BD:90:FC:78:55:23:CC:D7:23
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32342e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:51:1a:0d:99:5f:7b:75:a4:b6:4a:60:e2:ea:6f:c0:af:fc:
         fa:d6:48:99:58:94:47:63:7f:89:73:1c:76:01:02:bb:bf:28:
         7f:73:27:c1:b4:0b:db:30:4e:80:52:00:98:56:c0:fb:7d:d4:
         54:56:77:de:e0:bc:c3:83:62:79:da:c3:40:0a:3a:87:79:0d:
         29:1e:cc:63:69:b6:c1:d1:f6:7f:3a:6e:bd:5d:ef:15:65:fa:
         eb:2d:08:53:e0:9f:0e:f5:8b:ae:a2:fa:1a:6c:a6:bb:8f:99:
         bc:1b:c2:2f:ec:af:2a:da:c5:3e:19:b1:65:c1:79:bc:e0:3a:
         16:80:f8:13:45:41:9d:84:b1:e7:71:af:ce:a3:11:d4:9a:19:
         47:2f:c0:01:71:d6:c0:d6:c1:1f:a7:67:9b:be:bc:ab:4d:20:
         dc:26:6c:8c:5e:c5:d0:38:dd:2e:51:5c:9d:94:ba:5f:d5:12:
         31:13:79:ef:bf:82:47:c1:7b:6c:e3:68:a0:0a:34:c8:94:94:
         3e:43:ec:b1:f9:f3:80:0f:b3:0b:0a:3e:5c:49:ee:af:22:4b:
         3b:a0:c1:85:c4:1d:f8:ba:79:a1:06:85:fa:4c:a9:d5:8e:11:
         fa:95:36:b5:b2:22:77:41:08:85:98:7d:01:98:23:65:6c:a3:
         89:1e:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org